Google
ASSOCIATE-CLOUD-ENGINEER · Question #267
Your team is using Linux instances on Google Cloud. You need to ensure that your team logs in to these instances in the most secure and cost efficient way. What should you do?
The correct answer is B. Use the gcloud compute ssh command with the --tunnel-through-iap flag. Allow ingress traffic. https://cloud.google.com/compute/docs/connect/ssh-using-iap#gcloud
Submitted by certguy· Mar 30, 2026Configuring access and security
Question
Your team is using Linux instances on Google Cloud. You need to ensure that your team logs in to these instances in the most secure and cost efficient way. What should you do?
Options
- AAttach a public IP to the instances and allow incoming connections from the internet on port 22 for
- BUse the gcloud compute ssh command with the --tunnel-through-iap flag. Allow ingress traffic
- CUse a third party tool to provide remote access to the instances.
- DCreate a bastion host with public internet access. Create the SSH tunnel to the instance through
How the community answered
(22 responses)- A18% (4)
- B68% (15)
- C9% (2)
- D5% (1)
Explanation
https://cloud.google.com/compute/docs/connect/ssh-using-iap#gcloud
Topics
#Identity-Aware Proxy#IAP tunnel#SSH access#secure instance access
Community Discussion
No community discussion yet for this question.